Privacy Policy for Epitree

Effective Date: September 12, 2026

Welcome to Epitree ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (epitree.com) or use our Browser Extension and related services.
1. Information We Collect

To provide you with our contextual glossary and concept-mapping services, we collect the following types of information:

Account Information: When you sign up using Google Sign-In or email/password via Firebase Authentication, we collect your email address, name, and profile picture.
User Content: When you use the Epitree Browser Extension to save a concept, we collect the highlighted word/term, the surrounding context sentence, and the source URL of the webpage you are visiting.
Learning Metrics: We track your spaced repetition progress, including review dates, repetition counts, memory grades (0-5), and calculated ease factors.
Technical Data: Standard web server logs including IP addresses, browser types, and usage timestamps.


1. How We Use Your Information

We use the information we collect strictly to operate and improve the Epitree service:

Core Functionality: To build your personal knowledge graph, link similar concepts, and calculate your spaced repetition schedule.
Communication: To send you automated daily review emails, security alerts, and billing updates.
AI Processing: To generate vector embeddings of your saved words so our system can automatically connect related concepts in your tree.


1. Third-Party Services & AI Processing

We do not sell your personal data. We share data only with essential third-party service providers required to run our infrastructure:

Authentication: Firebase/Google Cloud (to manage secure logins).
Email Delivery: AWS SES or similar providers (to send secure transactional emails and digests).
AI Processing: If our backend utilizes external AI services (e.g., OpenAI) to generate vector embeddings, we securely transmit only the specific word and its surrounding sentence to generate the mathematical embedding. Note: Data sent via OpenAI APIs is not used to train their public models.


1. Browser Extension Specifics

In compliance with the Chrome Web Store User Data Privacy Policy:

Single Purpose: The Epitree extension is designed solely to capture vocabulary and context to build a personal learning database.
Permissions: We only request permissions necessary to capture highlighted text on active tabs and communicate securely with our backend.
Data Transfer: We do not transfer your browsing history. We only transmit the specific text you actively choose to save.


1. Cookies and Tracking Technologies

We use strictly necessary cookies and similar tracking technologies to ensure our website functions securely and effectively. These essential cookies are required for:

Authentication: Keeping you securely logged in (managed by Firebase).
Billing & Security: Processing payments and managing subscriptions securely (managed by Razorpay).


Because we currently only use essential cookies, we do not require a cookie consent banner. We do not use non-essential cookies for analytics, advertising, or cross-site tracking.
6. Data Security and Retention

We implement modern security measures, including HTTPS encryption and secure JWT (JSON Web Token) authentication, to protect your data. Your data is stored securely in our managed databases (PostgreSQL). We retain your account data and saved concepts until you explicitly delete your account.
7. Your Rights

Depending on your location (e.g., GDPR in Europe, CCPA in California), you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request the deletion of your account and all associated vocabulary data.
Opt-out of scheduled email digests via the unsubscribe link in our emails or within the dashboard.


To exercise any of these rights, please contact us at digest@epitree.com.
8. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Effective Date."
9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: digest@epitree.com
Website: https://epitree.com